Internet Engineering Task Force (IETF) R. Housley
Request for Comments: 7299 Vigil Security
Category: Informational July 2014
ISSN: 2070-1721
Object Identifier Registry for the PKIX Working Group
Abstract
When the Public-Key Infrastructure using X.509 (PKIX) Working Group
was chartered, an object identifier arc was allocated by IANA for use
by that working group. This document describes the object
identifiers that were assigned in that arc, returns control of that
arc to IANA, and establishes IANA allocation policies for any future
assignments within that arc.
Status of This Memo
This document is not an Internet Standards Track specification; it is
published for informational purposes.
This document is a product of the Internet Engineering Task Force
(IETF). It represents the consensus of the IETF community. It has
received public review and has been approved for publication by the
Internet Engineering Steering Group (IESG). Not all documents
approved by the IESG are a candidate for any level of Internet
Standard; see Section 2 of RFC 5741.
Information about the current status of this document, any errata,
and how to provide feedback on it may be obtained at
http://www.rfc-editor.org/info/rfc7299.
Copyright Notice
Copyright (c) 2014 IETF Trust and the persons identified as the
document authors. All rights reserved.
This document is subject to BCP 78 and the IETF Trust's Legal
Provisions Relating to IETF Documents
(http://trustee.ietf.org/license-info) in effect on the date of
publication of this document. Please review these documents
carefully, as they describe your rights and restrictions with respect
to this document. Code Components extracted from this document must
include Simplified BSD License text as described in Section 4.e of
the Trust Legal Provisions and are provided without warranty as
described in the Simplified BSD License.
Housley Informational [Page 1]

RFC 7299 PKIX OID Registry July 20143.19. "SMI Security for PKIX OIDs Used Only for Testing" Registry
Within the SMI-numbers registry, an "SMI Security for PKIX OIDs used
Only for Testing (1.3.6.1.5.5.7.13)" table with three columns has
been added:
Decimal Description References
------- ------------------------------ ----------
1 id-TEST-certPolicyOne [RFC7229]
2 id-TEST-certPolicyTwo [RFC7229]
3 id-TEST-certPolicyThree [RFC7229]
4 id-TEST-certPolicyFour [RFC7229]
5 id-TEST-certPolicyFive [RFC7229]
6 id-TEST-certPolicySix [RFC7229]
7 id-TEST-certPolicySeven [RFC7229]
8 id-TEST-certPolicyEight [RFC7229]
Note: The object identifiers in this table should not appear on the
public Internet. These object identifiers are ONLY for
TESTING.
Future updates to this table are to be made according to the
Specification Required policy as defined in [RFC5226].
3.20. "SMI Security for PKIX Certificate Policies" Registry
Within the SMI-numbers registry, an "SMI Security for PKIX
Certificate Policies (1.3.6.1.5.5.7.14)" table with three columns has
been added:
Decimal Description References
------- ------------------------------ ---------------------
1 id-cp-sbgpCertificatePolicy Reserved and Obsolete
2 id-cp-ipAddr-asNumber [RFC6484]
Future updates to this table are to be made according to the
Specification Required policy as defined in [RFC5226].
3.21. "SMI Security for PKIX CMC Error Types" Registry
Within the SMI-numbers registry, an "SMI Security for PKIX CMC Error
Types (1.3.6.1.5.5.7.15)" table with three columns has been added:
Decimal Description References
------- ------------------------------ ----------
1 id-cet-skdFailInfo [RFC5275]
Housley Informational [Page 17]

RFC 7299 PKIX OID Registry July 2014
Future updates to this table are to be made according to the
Specification Required policy as defined in [RFC5226].
3.22. "SMI Security for PKIX Revocation Information Types" Registry
Within the SMI-numbers registry, an "SMI Security for PKIX Revocation
Information Types (1.3.6.1.5.5.7.16)" table with three columns has
been added:
Decimal Description References
------- ------------------------------ ----------
1 id-ri-crl [RFC5940]
2 id-ri-ocsp-response [RFC5940]
3 id-ri-delta-crl [RFC5940]
4 id-ri-scvp [RFC5940]
Future updates to this table are to be made according to the
Specification Required policy as defined in [RFC5226].
3.23. "SMI Security for PKIX SCVP Check Types" Registry
Within the SMI-numbers registry, an "SMI Security for PKIX SCVP Check
Types (1.3.6.1.5.5.7.17)" table with three columns has been added:
Decimal Description References
------- ------------------------------------------------ ----------
1 id-stc-build-pkc-path [RFC5055]
2 id-stc-build-valid-pkc-path [RFC5055]
3 id-stc-build-status-checked-pkc-path [RFC5055]
4 id-stc-build-aa-path [RFC5055]
5 id-stc-build-valid-aa-path [RFC5055]
6 id-stc-build-status-checked-aa-path [RFC5055]
7 id-stc-status-check-ac-and-build-status-checked-aa-path
[RFC5055]
Future updates to this table are to be made according to the
Specification Required policy as defined in [RFC5226].
Housley Informational [Page 18]

RFC 7299 PKIX OID Registry July 20143.25. "SMI Security for PKIX SCVP Validation Policies and Algorithms" Registry
Within the SMI-numbers registry, an "SMI Security for PKIX SCVP
Validation Policies and Algorithms (1.3.6.1.5.5.7.19)" table with
three columns has been added:
Decimal Description References
------- ------------------------------ ----------
1 id-svp-defaultValPolicy [RFC5055]
2 id-svp-nameValAlg [RFC5055]
3 id-svp-basicValAlg [RFC5055]
4 id-svp-dnValAlg [RFC5055]
Note: id-svp-nameValAlg is also known as id-nvae.
Note: id-svp-basicValAlg is also known as id-bvae.
Note: id-svp-dnValAlg is also known as id-dnvae and id-nva-dnCompAlg.
Future updates to this table are to be made according to the
Specification Required policy as defined in [RFC5226].
3.26. "SMI Security for PKIX SCVP Name Validation Policy Errors" Registry
Within the SMI-numbers registry, an "SMI Security for PKIX SCVP Name
Validation Policy Errors (1.3.6.1.5.5.7.19.2)" table with three
columns has been added:
Decimal Description References
------- ------------------------------ ----------
1 id-nvae-name-mismatch [RFC5055]
2 id-nvae-no-name [RFC5055]
3 id-nvae-unknown-alg [RFC5055]
4 id-nvae-bad-name [RFC5055]
5 id-nvae-bad-name-type [RFC5055]
6 id-nvae-mixed-names [RFC5055]
Future updates to this table are to be made according to the
Specification Required policy as defined in [RFC5226].
Housley Informational [Page 20]

RFC 7299 PKIX OID Registry July 20143.29. "SMI Security for PKIX Other Logotype Identifiers" Registry
Within the SMI-numbers registry, an "SMI Security for PKIX Other
Logotype Identifiers (1.3.6.1.5.5.7.20)" table with three columns has
been added:
Decimal Description References
------- ------------------------------ ----------
1 id-logo-loyalty [RFC3709]
2 id-logo-background [RFC3709]
3 id-logo-certImage [RFC6170]
Future updates to this table are to be made according to the
Specification Required policy as defined in [RFC5226].
3.30. "SMI Security for PKIX Proxy Certificate Policy Languages" Registry
Within the SMI-numbers registry, an "SMI Security for PKIX Proxy
Certificate Policy Languages (1.3.6.1.5.5.7.21)" table with three
columns has been added:
Decimal Description References
------- ------------------------------ ----------
0 id-ppl-anyLanguage [RFC3820]
1 id-ppl-inheritAll [RFC3820]
2 id-ppl-independent [RFC3820]
Future updates to this table are to be made according to the
Specification Required policy as defined in [RFC5226].
3.31. "SMI Security for PKIX Proxy Matching Rules" Registry
Within the SMI-numbers registry, an "SMI Security for PKIX Proxy
Matching Rules (1.3.6.1.5.5.7.22)" table with three columns has been
added:
Decimal Description References
------- ------------------------------ ---------------------
1 id-mr-pkix-alphanum-ids Reserved and Obsolete
Future updates to this table are to be made according to the
Specification Required policy as defined in [RFC5226].
Housley Informational [Page 22]